Added charfilter to prevent command injection.